Effective September 9, 2026
Security and Trust
ATLAS separates customer access, provider operations, and auditable usage accounting.
Account isolation
API keys, projects, generations, usage, and billing records are scoped to their owning account. Administrative operations use separate authorization controls.
API protection
Credentials remain server-side, billable requests accept an optional idempotency key so a retried request is never charged twice, request sizes are limited, and public errors are filtered to avoid exposing infrastructure details.
Reporting
Report suspected security issues through the support channel in your account. Do not include API keys, passwords, or sensitive customer data in reports.